CVE-2023-27232: Command Injection
Published Mar 28, 2023
·Updated
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the wanStrategy parameter at /setting/setWanIeCfg.
Affected Software
4 affected components
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
All of the following
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
Event History
Mar 28, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-27232?
CVE-2023-27232 is a command injection vulnerability found in TOTOlink A7100RU V7.4cu.2313_B20191024 firmware.
2
How does the command injection vulnerability occur in TOTOlink A7100RU?
The command injection vulnerability occurs due to improper input validation of the wanStrategy parameter at /setting/setWanIeCfg.
3
What is the severity level of CVE-2023-27232?
The severity level of CVE-2023-27232 is critical with a CVSS score of 9.8.
4
Is TOTOlink A7100RU V7.4cu.2313_B20191024 affected by the vulnerability?
Yes, TOTOlink A7100RU V7.4cu.2313_B20191024 firmware is affected by the command injection vulnerability.
5
How can I fix the command injection vulnerability in TOTOlink A7100RU V7.4cu.2313_B20191024 firmware?
To fix the vulnerability, it is recommended to update the firmware to a patched version provided by TOTOlink.